$ rpki-client -vvf repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft File: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft (raw, json) Hash identifier: Eb4siROtNd5d4YeAnHhute4RgHpIefYRICKzxI5a1Zs= Subject key identifier: 25:F4:50:28:39:FD:14:BF:A6:36:97:0E:9C:25:25:D1:35:A4:C4:5B Authority key identifier: 98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 Certificate issuer: /CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Certificate serial: 3DE042BEDC04391C76BF75E8A9CA4565F7BAC75B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft Manifest number: E8 Signing time: Mon 20 Oct 2025 03:21:10 +0000 Manifest this update: Mon 20 Oct 2025 03:16:10 +0000 Manifest next update: Thu 23 Oct 2025 10:07:10 +0000 Files and hashes: 1: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl (hash: 14Sn2CN/VpwPfcLwd5/rBGbrR2z9LKBcKpMxYBjYt/M=) 2: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: j5FofZXIJd4POcdB4ESAE0x/xLx8UGEYcWSUY/DWNHw=) 3: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: 2ReMekYvbev7jjxFECsJnqLr+wMK4uSY0sQzIGWAR3Y=) 4: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: EqIrxJr5cRLahMi6fEAneUU1VnH8z0/jf+Oj0RPBMWg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:e0:42:be:dc:04:39:1c:76:bf:75:e8:a9:ca:45:65:f7:ba:c7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Validity Not Before: Oct 20 03:16:10 2025 GMT Not After : Oct 23 10:07:10 2025 GMT Subject: CN=25F4502839FD14BFA636970E9C2525D135A4C45B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:93:3e:3b:5f:64:ac:c6:e2:08:f2:56:37: b4:25:42:49:89:f3:4c:a6:11:c8:17:07:b5:e8:ff: 74:87:c0:c9:ae:8b:e4:3d:1c:9e:d2:85:82:5f:af: 0d:12:28:d9:66:87:67:39:fb:56:67:fd:ac:d1:0f: 07:96:87:b6:05:c4:c3:01:70:b4:42:32:3e:b3:08: d6:ba:04:06:21:5f:f9:3d:bc:0c:b2:cd:12:cb:49: a4:ba:ae:07:24:1c:48:d9:af:26:55:eb:1c:37:51: aa:81:91:4f:f8:b1:c9:7f:72:56:a8:cb:60:02:04: f6:c7:97:e0:af:74:77:a2:05:cf:f6:0f:32:71:0d: d7:10:0f:b5:6f:30:f7:21:cf:d6:c7:6a:da:19:ed: 00:e0:9d:96:a9:f5:67:c9:c0:2f:1b:89:0d:12:4e: 02:a7:e7:f1:f9:20:18:5d:71:81:e6:22:12:42:b1: aa:0d:0d:d3:42:15:93:96:02:79:45:2d:7c:fa:5b: 4b:e6:3b:ae:4f:7d:da:51:b3:e7:2a:31:d8:13:a9: a6:b4:81:84:bc:3b:40:97:60:20:ed:10:a1:aa:ef: ea:b3:1a:5d:58:4f:9a:16:1f:6d:de:63:e3:bb:79: d9:32:21:2c:85:9a:02:c6:0a:9f:4e:3b:35:b8:1e: 41:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F4:50:28:39:FD:14:BF:A6:36:97:0E:9C:25:25:D1:35:A4:C4:5B X509v3 Authority Key Identifier: keyid:98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:33:3c:d8:b5:53:1c:92:1e:19:cc:63:fd:0d:1d:df:fb:0d: ef:56:25:3d:59:fe:12:20:b8:ab:af:0f:a8:a3:ee:e3:d7:22: 1c:b1:16:6f:26:1a:94:c8:bd:c8:e6:e9:3e:c6:97:3f:39:1f: bc:0d:4d:aa:89:ec:69:aa:1c:86:f0:24:5c:6b:89:16:f4:ed: 49:4e:49:83:1a:f4:a6:02:00:16:3d:c3:c6:cb:bb:f9:7f:c5: ad:14:0c:9c:17:cb:3a:8e:d5:c4:a3:66:4b:f9:b2:82:6c:a2: e8:b9:7e:0e:4b:13:c1:9b:da:25:12:eb:cf:b6:e9:66:58:18: 07:7f:0c:77:d4:07:64:78:a4:55:8b:55:92:81:62:f7:91:cc: a1:b2:c4:62:6d:d8:66:c0:65:1c:4d:8b:93:7a:56:b0:1e:1d: bb:17:db:d2:0d:26:78:9b:a1:61:8d:2f:73:5e:1c:f5:94:04: 4c:08:a2:3e:89:54:47:a8:19:fb:c8:74:b0:d8:34:6c:a3:41: 53:7d:a7:97:1e:29:0a:03:68:54:f0:b1:1a:d4:56:20:e9:72: ed:32:ef:52:46:9c:6c:87:78:6a:ac:83:86:4a:48:36:34:4e: a5:13:f0:54:66:10:d5:c0:27:1b:c1:b5:4d:a8:ad:9a:65:e2: b6:39:07:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPeBCvtwEORx2v3XoqcpFZfe6x1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjEx MTNGNUREMTAeFw0yNTEwMjAwMzE2MTBaFw0yNTEwMjMxMDA3MTBaMDMxMTAvBgNV BAMTKDI1RjQ1MDI4MzlGRDE0QkZBNjM2OTcwRTlDMjUyNUQxMzVBNEM0NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBwZM+O19krMbiCPJWN7QlQkmJ 80ymEcgXB7Xo/3SHwMmui+Q9HJ7ShYJfrw0SKNlmh2c5+1Zn/azRDweWh7YFxMMB cLRCMj6zCNa6BAYhX/k9vAyyzRLLSaS6rgckHEjZryZV6xw3UaqBkU/4scl/clao y2ACBPbHl+CvdHeiBc/2DzJxDdcQD7VvMPchz9bHatoZ7QDgnZap9WfJwC8biQ0S TgKn5/H5IBhdcYHmIhJCsaoNDdNCFZOWAnlFLXz6W0vmO65PfdpRs+cqMdgTqaa0 gYS8O0CXYCDtEKGq7+qzGl1YT5oWH23eY+O7edkyISyFmgLGCp9OOzW4HkHVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJfRQKDn9FL+mNpcOnCUl0TWkxFswHwYDVR0j BBgwFoAUmALXzYTso3ouwtY3jco1sRE/XdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGMyNjZlNi0wYjg0LTQzMWYtOWU3NC0wNmQzZDkzZTk3MDQvMC85ODAyRDdDRDg0 RUNBMzdBMkVDMkQ2Mzc4RENBMzVCMTExM0Y1REQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjExMTNG NUREMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjMjY2ZTYtMGI4NC00MzFmLTll NzQtMDZkM2Q5M2U5NzA0LzAvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1 QjExMTNGNUREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEzPNi1UxySHhnMY/0NHd/7De9WJT1Z/hIg uKuvD6ij7uPXIhyxFm8mGpTIvcjm6T7Glz85H7wNTaqJ7GmqHIbwJFxriRb07UlO SYMa9KYCABY9w8bLu/l/xa0UDJwXyzqO1cSjZkv5soJsoui5fg5LE8Gb2iUS68+2 6WZYGAd/DHfUB2R4pFWLVZKBYveRzKGyxGJt2GbAZRxNi5N6VrAeHbsX29INJnib oWGNL3NeHPWUBEwIoj6JVEeoGfvIdLDYNGyjQVN9p5ceKQoDaFTwsRrUViDpcu0y 71JGnGyHeGqsg4ZKSDY0TqUT8FRmENXAJxvBtU2orZpl4rY5B5A= -----END CERTIFICATE-----Generated at Mon Oct 20 23:31:43 2025 by rpki-client